EAST Search History 



Ref 

# 


Hits 


Search Query 


DBs 


Default 
Operator 


Plurals 


Time Stamp 


SI 


S 


) "20050091558" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:06 


S2 


1043 


hook$ adj (routine procedure 
function subroutine) 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:07 


S3 


98 


hook$ adj (routine procedure 
function subroutine).clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:07 


S4 


hook$ adj (routine procedure 
function subroutine).clm. and 
malicious 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:09 


S5 


58 


hook$ adj (routine procedure 
function subroutine).clm. and flow 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:10 


S6 


0 


hook$ adj (routine procedure 
function subroutine).clm. and flow, 
elm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:10 


S7 




hook$ adj (routine procedure 
function subroutine).clm. and 
system adj call 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:13 


S8 


3 


hook$ adj (routine procedure 
function subroutine).clm. and 
(malicious malware virusattack) 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:24 


S9 


390 


information adj flow adj diagram 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:18 


S10 


0 


(information adj flow adj 
diagram).clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:18 


Sll 


189 


(flow adj diagram).clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:18 
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S12 






1 (flow adj diagram).clm. and hook, 
elm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:18 


S13 


619 


(information adj flow).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:18 


S14 






(information adj flow).clm. and 
hook.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:20 


S15 




35 


((heuristics behavior anomaly) and 
hook).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:21 


S16 




34 


((heuristics behavior anomaly) and 
hook).ab. and (@ad 
@Drad)<"20031028" 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:22 


S17 


315 


(hook$ handler) adj (routine 
procedure function subroutine), 
elm. 


US-PGPUB; 

USPAT; 

EPO; 

IBMJTDB 


OR 


ON 


2006/12/12 15:24 


S18 




36 


(hook$ handler) adj (routine 
procedure function subroutine), 
elm. and ("726" "380" "713").clas. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:26 


S19 




30 


(hook$ handler) adj (routine 
procedure function subroutine), 
elm. and ("726" "380" "713").clas. 
and (@ad @prad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 16:17 


S20 


376 


(hook$ and interrupt) and ("726" 
"380" "713").clas. and (@ad 
@Drad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:32 


S21 


i 


308 


(hook$ and interrupt and flow) 
and ("726" "380" "713").clas. and 
(@ad @prad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:32 


•S22 


f? 


(hook$ and interrupt and flow) 
and ("726" "380" "713").clas. and 
(@ad @prad) < "20031028" and 
compare.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:33 


S25 


( 


j 


(hook$ and interrupt and flow) 
and ("726" "380" "713").clas. and 
(@ad @prad) < "20031028" and 
hook$.ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:35 
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S26 


398 


(hook$ and interrupt and flow) 
and (@ad @prad) < "20031028" 
and hooki.ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:36 


S27 


1019 


(hook$ and interrupt and flow) 
and (@ad @prad) < "20031028" 
and hooki.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:36 


S29 


40 


(hook$ and interrupt and flow) 
and (@ad @prad) < "20031028" 
and nook$.ab. and location. ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:41 


S30 


66 


software adj interrupt.ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:41 


S31 


66 


software adj interrupt.ab. and 
(@ad @prad) <"22231028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 15:41 


S32 


59 


software adj interruptab. and 
(@ad @prad) <"20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:10 


S33 


1450 


((hook interrupt) with call).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:11 


S34 


72 


((hook interrupt) with call with 
(flow process)).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:12 


S35 


57 


((hook interrupt) with call with 
(flow process)).clm. and system, 
elm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:15 


S36 


103 


((hook interrupt) same call same 
(flow process)).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:14 


S37 


45 


interrupt adj handler.ti. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:18 


S38 


(3 


interrupt.ti. and (malicious virus 
malware attack).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/12 16:45 
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S39 


50580 


"717 , 7("127" "128" "129").ccls. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:46 


S40 


596 


717/127.ccls. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 19:33 


S41 


947 


717/127.ccls. 717/128.ccls. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:46 


S42 


1144 


717/127.ccls. 717/128.ccls. 
717/129.ccls. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:46 


S43 


148 


(717/127.ccls. 717/128.ccls. 
717/129.ccls.) and hook 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:46 


S44 


429 


(717/127.ccls. 717/128.ccls. 
717/129.ccls.) and (hook 
interrupt) 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:47 


S45 


130 


(717/127.ccls. 717/128.ccls. 
717/129.ccls.) and (hook 
interrupt).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 16:47 


S46 


28 


(717/127.ccls. 717/128.ccls. 
717/129.ccls.) and (hook 
interrupt).clm. and (analyze 
monitor).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 18:16 


S47 


74 


"5974549" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 18:17 


S48 




"5974549".pn. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/12 18:17 


S49 


68 


("5974549").URPN. 


USPAT 


OR 


ON 


2006/12/12 18:18 


S50 


is 


("5974549").URPN. and (hook 
interrupt) 


USPAT 


OR 


ON 


2006/12/12 18:18 


S51 


596 


717/127.ccls. 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/12 19:25 
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S52 




717/127.ccls. and ("380" "726"). 
clas. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/12 19:25 


S53 


((open adj file) and (copy adj 
file)).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:19 


S55 




^ (prevent$ adj file adj2 delet$).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:20 


S56 




^(prevent$ adj file adj2 (delet$ 
'modif$)).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:31 


S57 


5753 


data adj flow adj diagram 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:32 


S58 


189 


(flow adj diagram).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:32 


S59 


61 


(flow adj diagram).clm. and 
processing.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:32 


S60 


45 


(flow adj diagram).clm. and 
processing.clm. and data.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:32 


S61 


37 


(flow adj diagram).clm. and 
processing.clm. and data.clm. and 
(@ad @prad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:34 


S62 


954 


(showing adj data adj flow) and 
(@ad @prad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:34 


S64 


& 


diagram with (showing adj data 
adj flow) and (@ad @prad) < 
"20031028" and (file adj (copy 
delete modify)) 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:40 


S65 


b 


(show$ adj data adj (flow 
process)).clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM TDB 


OR 


ON 


2006/12/13 16:40 
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S66 




(show$ adj data adj (flow 
process)).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 16:41 


S67 


90 


(show$ adj data adj (flow 
process)).bsum. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:41 


S68 


71 


(show$ adj data adj (flow 
process)).bsum. and (@ad @prad) 
< "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:42 


S69 


59 


(show$ adj data adj (flow 
process)).bsum. and (@ad @prad) 
< "20031028" and data.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 16:43 


S71 


& 


1 S69 and ("713" "726" "380").clas. 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 19:07 


S72 




show with physical with virtual 
with location 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/13 19:07 


S73 




(show with physical with virtual 
with location). elm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 19:07 


S74 


(show with physical with virtual 
with location) same data 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 19:08 


S75 


6922 


show with location with 
(information data) 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 19:09 


S76 


1815 


show$ adj location with 
(information data) 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 19:09 


S77 


122 


(show$ adj location with 
(information data)).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/13 19:10 


S78 


55 


(show$ adj location with 
(information data)).clm. and data, 
ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/13 19:11 
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S79 


220 


display adj data adj (flow process 
location) 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:12 


S80 


e 


)display adj data adj (flow process 
location).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:14 


S81 


0 


graphic$ adj display adj data adj 
location 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:14 


S82 


934 


graphic$ adj display adj data 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:14 


S83 


0 


graphic$ adj display adj file adj 
location 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:15 


S84 


53 


expected adj flow with data 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:15 


S85 


& 


expected adj flow with data and 
(malicious virus malware attack 
intrusion) 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:16 


S86 


84 


(expected adj behavior).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:16 


S87 


6 


(expected adj behavior).clm. and 
hook 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:17 


S88 




(expected adj behavior).clm. and 
interrupt 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:17 


S89 


490 


717/127.ccls. and @ad < 
"20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBMJTDB 


OR 


ON 


2006/12/13 19:33 


S90 


185 


717/127.ccls. and @ad < 
"20031028" and (hook interrupt) 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/13 19:34 
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S91 


59 


717/127.ccls. and @ad < 
"20031028" and (hook interrupt), 
dm. . 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 19:34 


S92 


9 


717/127.ccls. and @ad < 
"20031028" and (hook interrupt), 
dm. and location.clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:15 


S93 


1465 


((information content data) and 
flow).ti. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/13 20:15 


S94 


45 


((information content data) and 
flow).ti. and (intrusion virus 
malicious ma 1 ware attack) 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:19 


S95 


£> 


(data and monitor$ and process), 
ti. and (intrusion virus malicious 
malware attack) 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:20 


S96 


46 


(real adj time and monitor$).ti. 
and (intrusion virus malicious 
malware attack) 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/13 20:23 


S97 


2656 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack) 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB . 


OR 


ON 


2006/12/13 20:23 


S98 


112 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack).ab. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/13 20:24 


S99 


86 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack).ab. and 
(@ad @prad) < "20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:25 


SIO 
0 


357 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack) and 
hook 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:25 


SIO 
1 


& 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack) and 
hookxlm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/13 20:26 


SIO 
2 


47 


data adj processing and real-time 
and monitor$ and (intrusion virus 
malicious malware attack) and 
interrupt.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/13 20:34 
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SIO 
3 


97 


real adj time and intrusion adj 
detection and hook 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:34 


SIO 
4 




* real adj time and intrusion adj 
detection and hookxlm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:36 


SIO 
5 




"0206991" 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:46 


SIO 
6 


6 


"6981252" 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:54 


SIO 
7 


1829 


interrupt and hookxlm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:54 


SIO 
8 


182 


interrupt and hookxlm. and flow, 
elm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:54 


SIO 
9 


39 


interrupt and hookxlm. and flow, 
elm. and location.clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:55 


Sll 
0 


35 


interrupt and hookxlm. and flow, 
dm. and location.clm. and (@ad 
@prad) < "20031028" 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/13 20:56 


Sll 
1 


0 


software adj interrupt and hook, 
elm. and flow.clm. and location, 
elm. and (@ad @prad) < 
"20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/13 20:56 


Sll 
2 


20 


software adj interrupt and hook, 
dm. and (@ad @prad) < 
"20031028" 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/14 13:00 


Sll 
3 


44 


monitoring adj flow adj data 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/14 13:00 


Sll 
4 


0 


(monitoring adj flow adj data). dm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM TDB 


OR 


ON 


2006/12/14 13:01 
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Sll 
5 




monitoring adj file adj (copy$ 
delet$) 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 13:03 


Sll 
6 




(intrusion adj detection). ab. and 
hook.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/14 13:04 


Sll 

7 




malicious.clm. and hook.clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/14 13:06 


Sll 
8 


& 
0 

v I 


malicious.clm. and interrupt.clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/14 13:09 


Sll 
9 


0 


malicious.clm. and callback.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/14 14:32 


S12 
0 


ft 


malicious.clm. and call adj back, 
elm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/14 13:10 


S12 
1 


113 


hook adj routine 


US-PGPUB; 

USPAT; 

EPO; 

IBM.TDB 


OR 


ON 


2006/12/14 13:10 


S12 
2 




hook adj routine.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 13:11 


S12 
3 


57 


hook adj function.clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/14 13:52 


S12 
4 


29 


(system adj (call process) and 
gui).clm. 


US-PGPUB; 

USPAT; 

EPO; 

IBM_TDB 


OR 


ON 


2006/12/14 13:53 


S12 
5 


& 


(display and network adj traffic).ti. 


US-PGPUB; 

USPAT; 

EPO; 

TDM THD 


OR 


ON 


2006/12/14 13:54 


S12 
6 




("658450T').URPN. 


USPAT 


OR 


ON 


2006/12/14 14:00 


S12 
7 


-a 


network adj analyzer and intrusion 
adj detection 


USPAT 


OR 


ON 


2006/12/14 14:03 
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S12 
8 


/0 


compare with data with flow with 
expected 


USPAT 


OR 


ON 


2006/12/14 14:05 


S12 
9 


0 


heuristics.clm. and hook.clm. 


USPAT 


OR 


ON 


2006/12/14 14:05 


S13 
0 




heuristics and hook.clm. 


USPAT 


OR 


ON 


2006/12/14 14:05 


S13 
1 


404 


717/127.ccls. 


USPAT 


OR 


ON 


2006/12/14 14:06 


S13 
2 


404 


717/127.ccls. 


USPAT 


OR 


ON 


2006/12/14 14:06 


S13 
3 


156 


717/127.ccls. and (hook interrupt) 


USPAT 


OR 


ON 


2006/12/14 14:08 


S13 
4 


53 


(compare with behavior).clm. 


USPAT 


OR 


ON 


2006/12/14 14:08 


S13 
5 


53 


(compare with behavior).clm. and 
(@ad @prad < "20031028") 


USPAT 


OR 


ON 


2006/12/14 14:08 


S13 
6 




726/30.ccls. and alert.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 14:37 


S13 
7 


187 


mandatory adj access 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/14 14:37 


S13 
8 


34 


mandatory adj access.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 14:40 


S13 
9 


46 


mandatory adj access and (hook 
interrupt) 


US-PGPUB; 
USPAT; 
EPO; 
IBM.TDB 


OR 


ON 


2006/12/14 14:40 


S14 
0 


& 


mandatory adj access and (hook 
interrupt).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 14:44 


S14 
1 




behavior adj anomaly.clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:23 


S14 
2 


0 


(detect adj malicios adj software), 
ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:23 
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S14 
3 


0 


(detect$ adj malicios adj 
software).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:23 


S14 
4 


6 


(detect$ adj malicious adj 
software).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:24 


S14 
5 


49 


(detect$ adj malicious).ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:24 


S14 
6 


49 


(detect$ adj malicious).ab. and 
(@ad @prad < "20031028") 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:26 


S14 

7 


41 


(behavior adj profile).clm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:26 


S14 
8 


9 


(behavior adj profile).clm. and 
intrusion adj detection 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:29 


S14 
9 


11678 


memory adj location .dm. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 15:29 


S15 
0 


6 


/memory adj location.clm. and 
intrusion adj detection.ab. 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 16:12 


S15 
1 


16 


compare with data with profile 
with expected 


US-PGPUB; 
USPAT; 
EPO; 
IBM_TDB 


OR 


ON 


2006/12/14 16:12 
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